As a user, I want TRAM to skip mapping certain sections, so that I don't have to deal with the noise of removing mappings from those sections.
Requirements:
- TBD
User statement:
Most CTI reports have a “Security Solutions”, “Mitigations”, “Recommendations”, or similar section at the end that will trigger TRAM mappings based on language used. Having a word proximity or other rule that would have TRAM skip this section would cut down on review and technique deletions in TRAM.
Implementation Discussion:
This could be rule based, or it could be "built in" behavior. This likely requires iteration with users to get to a concept that works and is implementable.